An increasing number of endpoint protection platform (EPP) tools are maturing to report on the vulnerabilities of the assets. The vulnerabilities reported are then prioritized and scored using risk-based prioritization techniques.

Stand-alone vulnerability management (VM) tools and EPP tools with a VM technique use different scanning methodologies to discover vulnerabilities - standalone tools rely on periodic scans, while EPP tools use the continuous scanning or scanless methodology.

Endpoint detection and response (EDR) tools with VM capabilities can potentially use vulnerability data to prioritize alerts and provide additional risk context to detection and response. These possibilities drive the inclusion of vulnerability management capabilities.